Commits

History for

oncodeql-cli/v2.25.2

Commits on Mar 29, 2026

Address review: update QLDoc comment and fix expected test output
MarkLee131
committed
e6adfbc
Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier
MarkLee131
authored
938039d
Update java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTainted.java

MarkLee131
and
owen-mc
authored
f5cfc5e

Commits on Mar 28, 2026

Exclude bounds-check arithmetic from tainted-arithmetic sinks
MarkLee131
committed
0c5e89a
Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs
MarkLee131
committed
da4a223
Add EC to secure algorithm whitelist for Java CWE-327 query
MarkLee131
committed
a9449cc

Commits on Mar 6, 2026

Merge pull request #21415 from owen-mc/java/validate-constructor-summary-models
owen-mc
authored
e96ba48

Commits on Mar 5, 2026

Update models in test output
owen-mc
committed
92a7190
Merge pull request #21412 from aschackmull/java/binary-assignment
aschackmull
authored
8ef4be4
Java: Make Assignment extend BinaryExpr.
aschackmull
committed
ec1d034

Commits on Mar 4, 2026

Add space before $ in xml test file
owen-mc
committed
2b31114
java: Inline expectation should have space before $
owen-mc
committed
f41c30e
Java: Inline expectation should have space after $
owen-mc
committed
ef345a3

Commits on Feb 23, 2026

Java: Add nullness test covering known FP.
aschackmull
committed
2b8e719
Java: Accept removal of spurious reason (the alert stays).
aschackmull
committed
d84e0e2
Java: Accept new TP in NullMaybe.
aschackmull
committed
8b0dd7b

Commits on Feb 16, 2026

Update test results (remove SPURIOUS annotations)
owen-mc
committed
cf73d96
Expand log injection sanitizers to annotation regex matches
owen-mc
committed
9fc95f5
Add failing log injection test for @Pattern validation
owen-mc
committed
146fc7a

Commits on Feb 14, 2026

Fix Matcher.matches edge case
owen-mc
committed
8f8f4c2
Add failing test for Matcher.matches() edge case
owen-mc
committed
90befa0

Commits on Feb 12, 2026

Add @Pattern as RegexExecution => SSRF sanitizer
owen-mc
committed
bfe26c1
Add failing test for @Pattern validation
owen-mc
committed
d0999e3

Commits on Feb 4, 2026

Java: Rename ReturnStmt.getResult to getExpr.
aschackmull
committed
6f40ac1

Commits on Jan 27, 2026

Add test for *Pool exclusion
owen-mc
committed
516b84b

Commits on Jan 15, 2026

Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks
owen-mc
authored
a5d9cb1

Commits on Jan 14, 2026

Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java

mbaluda
and
owen-mc
authored
5cef037

Commits on Jan 13, 2026

Fix test expectations
mbaluda
committed
9efefa6
Improve model for CWE-089
mbaluda
committed
d335f03
Fix `SqlTainted` test
mbaluda
committed
89f0e79
rename change notes
mbaluda
committed
dda042f

Commits on Jan 9, 2026

Merge branch 'github:main' into couchdb
mbaluda
authored
4c8058d

Commits on Dec 24, 2025

SQLi test case
mbaluda
committed
15ee88e

Commits on Dec 22, 2025

Hardcoded credentials in CouchBase
mbaluda
committed
b22077c

Commits on Dec 16, 2025

java: understand more initializers
yoff
committed
c6240e5